Static task
static1
Behavioral task
behavioral1
Sample
7176c978ba5f17239c0a4f42d714c411262a636fd8b75ce07e3697d55ae6578e.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
7176c978ba5f17239c0a4f42d714c411262a636fd8b75ce07e3697d55ae6578e.dll
Resource
win10v2004-20240226-en
General
-
Target
7176c978ba5f17239c0a4f42d714c411262a636fd8b75ce07e3697d55ae6578e
-
Size
13KB
-
MD5
404971cc89c085587c932390e28d6b20
-
SHA1
88d92d9cc95dae9d574b4443a0d9a32a90412c86
-
SHA256
7176c978ba5f17239c0a4f42d714c411262a636fd8b75ce07e3697d55ae6578e
-
SHA512
313d24ff66a9ccd97c2b25d19b01374eadceef0038af59098cfc777233bf15e25c2c6cb43b74e12f9ca8ca653e7bbab749410eed65780269b5d596176f2f9930
-
SSDEEP
192:wXLQmajkjykwFfLeMLYOs1TGamVFLsTPLt4TwTmxOQadkX:wb2kwFfLeML1gqjoTPLt4TwTmxOtKX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7176c978ba5f17239c0a4f42d714c411262a636fd8b75ce07e3697d55ae6578e
Files
-
7176c978ba5f17239c0a4f42d714c411262a636fd8b75ce07e3697d55ae6578e.dll .js windows:4 windows x86 arch:x86 polyglot
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ